Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/rjwklbbRCEcCVkNH2S68Pj1O4c0.roa
File: rjwklbbRCEcCVkNH2S68Pj1O4c0.roa (raw, json)
Hash identifier: wwxfx/s69kx/Y9yv4W8gc09vF7Uem4v7JU6JtUYvzgw=
Subject key identifier: AE:3C:24:95:B6:D1:08:47:02:56:43:47:D9:2E:BC:3E:3D:4E:E1:CD
Certificate issuer: /CN=6085397f26a044caef6a6b669287331aa4d68645
Certificate serial: 03380E07
Authority key identifier: 60:85:39:7F:26:A0:44:CA:EF:6A:6B:66:92:87:33:1A:A4:D6:86:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIU5fyagRMrvamtmkoczGqTWhkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/rjwklbbRCEcCVkNH2S68Pj1O4c0.roa
Signing time: Sat 01 Jan 2022 05:03:16 +0000
ROA not before: Sat 01 Jan 2022 05:03:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207895
IP address blocks: 185.213.240.0/22 maxlen: 22
185.130.60.0/22 maxlen: 24
185.244.94.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54005255 (0x3380e07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6085397f26a044caef6a6b669287331aa4d68645
Validity
Not Before: Jan 1 05:03:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ae3c2495b6d1084702564347d92ebc3e3d4ee1cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:04:4c:39:e3:c9:91:37:07:e8:85:6c:d0:36:
49:96:7f:19:d8:57:40:6d:b6:be:b3:5f:59:66:62:
bf:d9:ae:a8:18:2a:ce:49:c6:8d:aa:c3:de:6c:29:
06:02:b3:ed:34:84:2b:48:01:d6:19:34:53:85:5b:
12:b4:c1:24:28:06:4f:d4:f6:b9:96:14:84:0d:fb:
5f:90:17:83:bf:d5:8f:7a:12:aa:59:ea:ab:5e:41:
89:dc:37:ae:b2:22:10:17:d1:a7:4f:78:6a:cf:f5:
ea:b9:63:f1:5b:ff:9c:9b:65:7d:8d:c0:ca:00:9b:
8a:27:84:39:0c:a0:12:1b:18:da:01:40:e0:08:20:
07:0b:76:86:f5:af:28:8e:1f:3b:af:a3:9a:76:33:
db:d8:72:37:4f:e1:c8:a4:e9:4a:46:12:e1:52:2b:
4a:59:c8:1b:b1:5a:82:d7:6b:73:ad:53:58:38:01:
12:28:c2:7b:a1:d0:b7:ec:cb:e7:e2:06:84:ef:bf:
2b:cd:29:03:7a:fd:1a:f9:a5:fc:f8:1a:c6:06:74:
16:b1:be:24:3c:24:8a:59:dc:36:52:86:d9:75:94:
5e:16:db:44:de:f5:bd:b8:09:b9:08:d0:06:3a:44:
89:ff:a5:58:09:be:d3:84:f5:93:d2:d6:c3:27:61:
91:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:3C:24:95:B6:D1:08:47:02:56:43:47:D9:2E:BC:3E:3D:4E:E1:CD
X509v3 Authority Key Identifier:
keyid:60:85:39:7F:26:A0:44:CA:EF:6A:6B:66:92:87:33:1A:A4:D6:86:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIU5fyagRMrvamtmkoczGqTWhkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/rjwklbbRCEcCVkNH2S68Pj1O4c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/YIU5fyagRMrvamtmkoczGqTWhkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.130.60.0/22
185.213.240.0/22
185.244.94.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:41:88:7c:5b:e3:01:07:a7:07:36:df:cd:99:a8:11:cc:52:
b0:cd:cc:f4:9e:c4:0b:ff:c1:eb:d7:2e:15:40:23:20:4b:b0:
50:89:6d:06:a0:28:19:e1:21:60:29:72:63:0d:6f:03:a4:f6:
0e:ce:96:03:35:ef:1e:42:78:40:ae:65:90:47:73:7a:fd:01:
ce:e8:5d:d9:d4:2e:23:9f:13:89:04:3e:c9:79:2d:4c:96:7b:
40:67:4b:b6:18:c8:d3:00:8f:68:79:eb:3e:7d:5e:35:99:85:
a6:75:46:81:3a:d1:a9:c7:3b:ed:49:7c:5a:53:9d:0c:5e:fa:
f5:c3:ad:81:8d:2a:eb:ec:ed:01:d5:79:59:95:f9:fd:d9:f3:
46:06:4b:40:8a:89:4f:ec:f4:65:98:d6:00:2b:16:75:1b:7a:
13:cb:49:51:45:8b:38:b8:ac:31:0e:7a:be:cc:6e:32:8d:e0:
0a:17:23:dc:5d:b0:ec:15:b9:6e:9d:0e:1c:53:e2:bb:27:cd:
8e:50:dc:56:8c:3a:b4:3e:47:f1:ae:9f:b2:ea:16:f7:05:3c:
4c:2d:e0:6a:20:91:a8:35:c7:8e:c5:17:83:72:12:72:13:a0:
26:bf:f7:48:cc:12:ed:76:2c:b7:3b:36:cd:7d:ea:39:ef:f3:
30:c9:42:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 12:49:58 2025 by rpki-client